SAA-C03 practice questions 491–500

1. Question 491 · 1017 in bank

   A company runs a microservice-based serverless web application. The application must be able to retrieve data from multiple Amazon DynamoDB tables A solutions architect needs to give the application the ability to retrieve the data with no impact on the baseline performance of the application. Which solution will meet these requirements in the MOST operationally efficient way?

   • AAWS AppSync pipeline resolvers
   • BAmazon CloudFront with Lambda@Edge functions
   • CEdge-optimized Amazon API Gateway with AWS Lambda functions
   • DAmazon Athena Federated Query with a DynamoDB connector

   Show answer

   Answer: D

   Explanation

   Not A - Pipe Resolvers require coding, would not consider that 'operationally efficient' Not B - CloudFront caches web content at the edge, not DynamoDB query results for apps Not C - Neither API Gateway or Lambda have anything to do with DynamoDB performance D - Can do exactly that

   Source: Adapted from community discussion — pentium75

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

2. Question 492 · 1017 in bank

   A company wants to analyze and troubleshoot Access Denied errors and Unauthorized errors that are related to IAM permissions. The company has AWS CloudTrail turned on. Which solution will meet these requirements with the LEAST effort?

   • AUse AWS Glue and write custom scripts to query CloudTrail logs for the errors.
   • BUse AWS Batch and write custom scripts to query CloudTrail logs for the errors.
   • CSearch CloudTrail logs with Amazon Athena queries to identify the errors.
   • DSearch CloudTrail logs with Amazon QuickSight. Create a dashboard to identify the errors.

   Show answer

   Answer: C

   Explanation

   https://docs.aws.amazon.com/athena/latest/ug/cloudtrail-logs.html When troubleshooting you will want to query specific things in the log and Athena provides query language for that. Quick Sight is data analytics and visualisation tool. You can use it to aggregate data and maybe make a dashboard for number of errors by type etc but that doesn't help you troubleshoot anything. C is correct

   Source: Adapted from community discussion — awsgeek75

   References

   • AWS documentation
   • AWS documentation
   • repost.aws documentation

   Next question

3. Question 493 · 1017 in bank

   A company wants to add its existing AWS usage cost to its operation cost dashboard. A solutions architect needs to recommend a solution that will give the company access to its usage cost programmatically. The company must be able to access cost data for the current year and forecast costs for the next 12 months. Which solution will meet these requirements with the LEAST operational overhead?

   • AAccess usage cost-related data by using the AWS Cost Explorer API with pagination.
   • BAccess usage cost-related data by using downloadable AWS Cost Explorer report .csv files.
   • CConfigure AWS Budgets actions to send usage cost data to the company through FTP.
   • DCreate AWS Budgets reports for usage cost data. Send the data to the company through SMTP.

   Show answer

   Answer: A

   Explanation

   From AWS Documentation*: "You can view your costs and usage using the Cost Explorer user interface free of charge. You can also access your data programmatically using the Cost Explorer API. Each paginated API request incurs a charge of $0.01. You can't disable Cost Explorer after you enable it." * Source: https://docs.aws.amazon.com/cost-management/latest/userguide/ce-what-is.html https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-cost-explorer/interfaces/costexplorerpaginationconfiguration.html

   Source: Adapted from community discussion — MrAWSAssociate

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

4. Question 494 · 1017 in bank

   A solutions architect is reviewing the resilience of an application. The solutions architect notices that a database administrator recently failed over the application's Amazon Aurora PostgreSQL database writer instance as part of a scaling exercise. The failover resulted in 3 minutes of downtime for the application. Which solution will reduce the downtime for scaling exercises with the LEAST operational overhead?

   • ACreate more Aurora PostgreSQL read replicas in the cluster to handle the load during failover.
   • BSet up a secondary Aurora PostgreSQL cluster in the same AWS Region. During failover, update the application to use the secondary cluster's writer endpoint.
   • CCreate an Amazon ElastiCache for Memcached cluster to handle the load during failover.
   • DSet up an Amazon RDS proxy for the database. Update the application to use the proxy endpoint.

   Show answer

   Answer: D

   Explanation

   D is the correct answer. It is talking about the write database. Not reader. Amazon RDS proxy allows you to automatically route write request to the healthy writer, minimizing downtime.

   Source: Adapted from community discussion — alexandercamachop

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

5. Question 495 · 1017 in bank

   A company has a regional subscription-based streaming service that runs in a single AWS Region. The architecture consists of web servers and application servers on Amazon EC2 instances. The EC2 instances are in Auto Scaling groups behind Elastic Load Balancers. The architecture includes an Amazon Aurora global database cluster that extends across multiple Availability Zones. The company wants to expand globally and to ensure that its application has minimal downtime. Which solution will provide the MOST fault tolerance?

   • AExtend the Auto Scaling groups for the web tier and the application tier to deploy instances in Availability Zones in a second Region. Use an Aurora global database to deploy the database in the primary Region and the second Region. Use Amazon Route 53 health checks with a failover routing policy to the second Region.
   • BDeploy the web tier and the application tier to a second Region. Add an Aurora PostgreSQL cross-Region Aurora Replica in the second Region. Use Amazon Route 53 health checks with a failover routing policy to the second Region. Promote the secondary to primary as needed.
   • CDeploy the web tier and the application tier to a second Region. Create an Aurora PostgreSQL database in the second Region. Use AWS Database Migration Service (AWS DMS) to replicate the primary database to the second Region. Use Amazon Route 53 health checks with a failover routing policy to the second Region.
   • DDeploy the web tier and the application tier to a second Region. Use an Amazon Aurora global database to deploy the database in the primary Region and the second Region. Use Amazon Route 53 health checks with a failover routing policy to the second Region. Promote the secondary to primary as needed.

   Show answer

   Answer: D

   Explanation

   Auto Scaling groups can span Availability Zones, but not AWS regions. Hence the best option is to deploy the web tier and the application tier to a second Region. Use an Amazon Aurora global database to deploy the database in the primary Region and the second Region. Use Amazon Route 53 health checks with a failover routing policy to the second Region. Promote the secondary to primary as needed.

   Source: Adapted from community discussion — TariqKipkemei

   Next question

6. Question 496 · 1017 in bank

   A data analytics company wants to migrate its batch processing system to AWS. The company receives thousands of small data files periodically during the day through FTP. An on-premises batch job processes the data files overnight. However, the batch job takes hours to finish running. The company wants the AWS solution to process incoming data files as soon as possible with minimal changes to the FTP clients that send the files. The solution must delete the incoming data files after the files have been processed successfully. Processing for each file needs to take 3-8 minutes. Which solution will meet these requirements in the MOST operationally efficient way?

   • AUse an Amazon EC2 instance that runs an FTP server to store incoming files as objects in Amazon S3 Glacier Flexible Retrieval. Configure a job queue in AWS Batch. Use Amazon EventBridge rules to invoke the job to process the objects nightly from S3 Glacier Flexible Retrieval. Delete the objects after the job has processed the objects.
   • BUse an Amazon EC2 instance that runs an FTP server to store incoming files on an Amazon Elastic Block Store (Amazon EBS) volume. Configure a job queue in AWS Batch. Use Amazon EventBridge rules to invoke the job to process the files nightly from the EBS volume. Delete the files after the job has processed the files.
   • CUse AWS Transfer Family to create an FTP server to store incoming files on an Amazon Elastic Block Store (Amazon EBS) volume. Configure a job queue in AWS Batch. Use an Amazon S3 event notification when each file arrives to invoke the job in AWS Batch. Delete the files after the job has processed the files.
   • DUse AWS Transfer Family to create an FTP server to store incoming files in Amazon S3 Standard. Create an AWS Lambda function to process the files and to delete the files after they are processed. Use an S3 event notification to invoke the Lambda function when the files arrive.

   Show answer

   Answer: D

   Explanation

   Obviously we choose AWS Transfer Family over hosting the FTP server ourselves on an EC2 instance. And "process incoming data files as soon as possible" -> trigger Lambda when files arrive. Lambda functions can run up to 15 minutes, it takes "3-8 minutes" per file -> works. AWS Batch just schedules jobs, but these still need to run somewhere (Lambda, Fargate, EC2).

   Source: Adapted from community discussion — pentium75

   References

   • AWS documentation

   Next question

7. Question 497 · 1017 in bank

   A company is migrating its workloads to AWS. The company has transactional and sensitive data in its databases. The company wants to use AWS Cloud solutions to increase security and reduce operational overhead for the databases. Which solution will meet these requirements?

   • AMigrate the databases to Amazon EC2. Use an AWS Key Management Service (AWS KMS) AWS managed key for encryption.
   • BMigrate the databases to Amazon RDS Configure encryption at rest.
   • CMigrate the data to Amazon S3 Use Amazon Macie for data security and protection
   • DMigrate the database to Amazon RDS. Use Amazon CloudWatch Logs for data security and protection.

   Show answer

   Answer: B

   Explanation

   B is the answer Why not C - Option C suggests migrating the data to Amazon S3 and using Amazon Macie for data security and protection. While Amazon Macie provides advanced security features for data in S3, it may not be directly applicable or optimized for databases, especially for transactional and sensitive data. Amazon RDS provides a more suitable environment for managing databases.

   Source: Adapted from community discussion — AshishRocks

   Next question

8. Question 498 · 1017 in bank

   A company needs to store its accounting records in Amazon S3. The records must be immediately accessible for 1 year and then must be archived for an additional 9 years. No one at the company, including administrative users and root users, can be able to delete the records during the entire 10-year period. The records must be stored with maximum resiliency. Which solution will meet these requirements?

   • AStore the records in S3 Glacier for the entire 10-year period. Use an access control policy to deny deletion of the records for a period of 10 years.
   • BStore the records by using S3 Intelligent-Tiering. Use an IAM policy to deny deletion of the records. After 10 years, change the IAM policy to allow deletion.
   • CUse an S3 Lifecycle policy to transition the records from S3 Standard to S3 Glacier Deep Archive after 1 year. Use S3 Object Lock in compliance mode for a period of 10 years.
   • DUse an S3 Lifecycle policy to transition the records from S3 Standard to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 1 year. Use S3 Object Lock in governance mode for a period of 10 years.

   Show answer

   Answer: C

   Explanation

   Only CD provides Object Lock options which is required for stopping admin/root users from deleting. D is governance mode which is like government, pay enough money and you can do anything. This is not what we want so compliance is the option. C is right choice. For future, remember S3 Lock Governance = corrupt government official S3 Lock Compliance = honest solution architect!

   Source: Adapted from community discussion — awsgeek75

   References

   • AWS documentation
   • AWS documentation

   Next question

9. Question 499 · 1017 in bank

   A company has an online gaming application that has TCP and UDP multiplayer gaming capabilities. The company uses Amazon Route 53 to point the application traffic to multiple Network Load Balancers (NLBs) in different AWS Regions. The company needs to improve application performance and decrease latency for the online game in preparation for user growth. Which solution will meet these requirements?

   • AAdd an Amazon CloudFront distribution in front of the NLBs. Increase the Cache-Control max-age parameter.
   • BReplace the NLBs with Application Load Balancers (ALBs). Configure Route 53 to use latency-based routing.
   • CAdd AWS Global Accelerator in front of the NLBs. Configure a Global Accelerator endpoint to use the correct listener ports.
   • DAdd an Amazon API Gateway endpoint behind the NLBs. Enable API caching. Override method caching for the different stages.

   Show answer

   Answer: C

   Explanation

   The key considerations are: The application uses TCP and UDP for multiplayer gaming, so Network Load Balancers (NLBs) are appropriate. AWS Global Accelerator can be added in front of the NLBs to improve performance and reduce latency by intelligently routing traffic across AWS Regions and Availability Zones. Global Accelerator provides static anycast IP addresses that act as a fixed entry point to application endpoints in the optimal AWS location. This improves availability and reduces latency. The Global Accelerator endpoint can be configured with the correct NLB listener ports for TCP and UDP.

   Source: Adapted from community discussion — Guru4Cloud

   Next question

10. Question 500 · 1017 in bank

    A company needs to integrate with a third-party data feed. The data feed sends a webhook to notify an external service when new data is ready for consumption. A developer wrote an AWS Lambda function to retrieve data when the company receives a webhook callback. The developer must make the Lambda function available for the third party to call. Which solution will meet these requirements with the MOST operational efficiency?

    • ACreate a function URL for the Lambda function. Provide the Lambda function URL to the third party for the webhook.
    • BDeploy an Application Load Balancer (ALB) in front of the Lambda function. Provide the ALB URL to the third party for the webhook.
    • CCreate an Amazon Simple Notification Service (Amazon SNS) topic. Attach the topic to the Lambda function. Provide the public hostname of the SNS topic to the third party for the webhook.
    • DCreate an Amazon Simple Queue Service (Amazon SQS) queue. Attach the queue to the Lambda function. Provide the public hostname of the SQS queue to the third party for the webhook.

    Show answer

    Answer: A

    Explanation

    A function URL is a dedicated HTTP(S) endpoint for your Lambda function. When you create a function URL, Lambda automatically generates a unique URL endpoint for you.

    Source: Adapted from community discussion — TariqKipkemei

    References

    • AWS documentation
    • AWS documentation
    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SAA-C03 practice, question 491. 1017 questions available.